coreruleset
coreruleset copied to clipboard
Some rules are NOT doing IIS specific decoding of ARGS* data
Rules 921151, 932190, 942441, 942442 and 942460 are doing UrlDecode for ARGS* (this is done automatically by engine) but NOT UrlDecodeUni (which happens after removing UrlDecode transformation), which includes also decoding of data specific for IIS. We are not sure if we need or want it so this needs to be decided. More info can be found here.